Shouldn't it be using the shim from the rEFInd rpm? Or are you saying that it can...
I installed refind 0.8.4 from the Fedora rpm on my Lenovo T440s with secure boot...